Forum Views ()
Forum Replies ()
Read more with google mobile :
Lockheed's cyber cops sift through hacker evidence
|
Edition:
U.S.
Article
Comments (0)
Follow Reuters
Facebook
Twitter
RSS
YouTube
Read
Air France crash sparks pilot mystery
27 May 2011
Nervous investors to seek bigger returns
3:50pm EDT
Roadside bomb kills seven NATO troops in Afghanistan
26 May 2011
Casey Anthony texts: "guess who spends eternity in jail"
28 May 2011
Lockheed says frequent cyber target from around world
1:15pm EDT
Discussed
94
Obama departs for Europe trip, explores Irish roots
81
Netanyahu speech eyed for sign of U.S.-Israel rift
74
$1 trillion on the table in U.S. debt talks
Watched
GM pulls the plug
Fri, May 27 2011
Scientists revive ancient spider in stunning 3D detail
Tue, May 24 2011
Death toll rises in Joplin, Missouri
12:30am EDT
Lockheed's cyber cops sift through hacker evidence
Tweet
Share this
By Andrea Shalal-Esa
WASHINGTON (Reuters) - Last week's attack on Lockheed Martin Corp's computer networks has galvanized dozens of cyber "detectives" at the company's cavernous security intelligence center outside Washington.
The U.S. government...
Email
Print
Related News
Exclusive: Hackers breached U.S. defense contractors
Fri, May 27 2011
Clinton calls on Pakistan to do more against militants
Fri, May 27 2011
Pakistan retakes naval base after attack
Mon, May 23 2011
Pakistan Taliban says attacked U.S. consulate convoy
Fri, May 20 2011
Gunmen kill Saudi diplomat in Pakistan's Karachi
Mon, May 16 2011
Analysis & Opinion
IRS sees staggering jump in identity theft cases
LinkedIn: The next security breach?
Related Topics
Technology »
A U.S. Lockheed Martin F-16 flies during an air display at the Farnborough International Air Show, Hampshire, July 19, 2004.
Credit: Reuters/Toby Melville
By Andrea Shalal-Esa
WASHINGTON |
Sun May 29, 2011 4:46pm EDT
WASHINGTON (Reuters) - Last week's attack on Lockheed Martin Corp's computer networks has galvanized dozens of cyber "detectives" at the company's cavernous security intelligence center outside Washington.
The U.S. government and Lockheed, the world's biggest military contractor and the Pentagon's No. 1 supplier, have said the unknown hackers did not seize any sensitive information in the May 21 attack, but government and industry experts are still working feverishly to isolate the origins of the attack.
Lockheed, which is also the U.S. government's biggest information technology provider, opened the 25,000-square-foot, $17 million center in 2008. It opened a sister site in Denver last year to help deal with the growing workload and take over if the main center is knocked off line.
Dozens of highly trained analysts work at the center in Gaithersburg, Maryland, where green plants and a Feng Shui-styled decor beckon visitors to a public collaboration space that looks like a high-tech university campus.
The real work, though, goes on in a large, dimly lit internal security center only open to critical personnel. Flickering wall-sized flat screens continuously update activity on Lockheed's mammoth worldwide computer network while monitoring data transmissions by 126,000 employees and outsiders trying to get access to the system.
A Defense Department spokeswoman, Air Force Lieutenant Colonel April Cunningham, said on Saturday that the Pentagon was working with Lockheed to gauge the scope of the attack.
Some top defense officials were on site last week to assess the wider impact, a defense official, who requested anonymity, told Reuters on Thursday.
Just two weeks ago, Lockheed advertised for a "lead computer forensic examiner" for the center, saying it needed someone who could work in a fast paced environment, understood "attack signatures, tactics, techniques and procedures associated with advanced threats," and was able to "reverse engineer attacker encoding protocols."
Lockheed builds advanced satellites, fighter jets and warships for the U.S. military, but also provides information technology services to the Justice Department, Federal Aviation Administration, Social Security Administration, and other federal agencies. It even ran the latest U.S. national census, which is only conducted once a decade, for the government.
Seeking to recruit the best cyber analysts on the market, Lockheed last year released a YouTube video, which portrays the cyber security problem as a complex chess match, or a sophisticated war game, between U.S. government and industry on one side, and a host of smart attackers from nation states and criminal groups on the other.
"It is a cat-and mouse game between the two sides," Eric Hutchins, a Lockheed cyber intelligence analyst, told Reuters during a visit to the center in March 2010. "They're constantly trying to develop new ways of attacking us and we're constantly trying to develop new ways of defending us."
Hitchens said Lockheed analysts processed 1 million "incidents" a day, sorting through the "white noise" to identify possible attacks and likely targets.
Another analyst featured in the Lockheed video compared his work to that of "CSI-style" detectives in reference to crime scene investigators who focus on forensic evidence and have been popularized by the CSI group of TV shows. "We go right to the scene of the crime and we look for evidence of the attack," he said.
It says they use techniques far beyond anything available in the wider commercial world.
The video makes the center seem like it is out of a movie like "Minority Report", describing hackers as "adversaries," "the enemy" or "bad guys" whose onslaught needs to be repelled. It ends with a flourish as one forensic analyst declares: "This is the fight we fight."
Cyber experts are now scouring the network to find any "electronic DNA" left behind by the hackers -- time-intensive work that may eventually help pinpoint the source of the attack, said one former senior government official.
"Everything leaves electronic DNA if you can find it," said the official, who was not authorized to speak on the record. "It's like digging for old bones."
Lockheed officials say they responded almost immediately to the May 21 attack, which was first reported by Reuters on Thursday, averting the loss of any customer, program or employee personal data.
Loren Thompson, a defense analyst who does consulting work for Lockheed and other military contractors, said the attack was "fairly subtle" but it underscored the growing information security challenges facing the U.S. government and industry, and validated Lockheed's ability to detect intrusions.
The next test is how quickly experts will be able to identify the source of the attack, and in particular whether it can be traced to a foreign power.
(Reporting by Andrea Shalal-Esa)
(Additional reporting by Jim Wolf. Editing by Martin Howell)
Technology
Related Quotes and News
Company
Price
Related News
Tweet this
Link this
Share this
Digg this
Email
Reprints
We welcome comments that advance the story directly or with relevant tangential information. We try to block comments that use offensive language, all capital letters or appear to be spam, and we review comments frequently to ensure they meet our standards. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters.
Comments (0)
Be the first to comment on reuters.com.
Add yours using the box above.
Social Stream (What's this?)
© Copyright 2011 Thomson Reuters
Editorial Editions:
Africa
Arabic
Argentina
Brazil
Canada
China
France
Germany
India
Italy
Japan
Latin America
Mexico
Russia
Spain
United Kingdom
United States
Reuters
Contact Us
Advertise With Us
Help
Journalism Handbook
Archive
Site Index
Video Index
Reader Feedback
Mobile
Newsletters
RSS
Podcasts
Widgets
Your View
Analyst Research
Thomson Reuters
Copyright
Disclaimer
Privacy
Professional Products
Professional Products Support
Financial Products
About Thomson Reuters
Careers
Online Products
Acquisitions Monthly
Buyouts
Venture Capital Journal
International Financing Review
Project Finance International
PEhub.com
PE Week
FindLaw
Super Lawyers Attorney Rating Service
Reuters on Facebook
Thomson Reuters is the world's largest international multimedia news agency, providing investing news, world news, business news, technology news, headline news, small business news, news alerts, personal finance, stock market, and mutual funds information available on Reuters.com, video, mobile, and interactive television platforms. Thomson Reuters journalists are subject to an Editorial Handbook which requires fair presentation and disclosure of relevant interests.
NYSE and AMEX quotes delayed by at least 20 minutes. Nasdaq delayed by at least 15 minutes. For a complete list of exchanges and delays, please click here.
Other News on Monday, 30 May 2011 Morocco police use truncheons to break up protest
|
Mubarak wealth no more than $1 milllion: lawyer
|
Lockheed's cyber cops sift through hacker evidence
|
Hangover Part II soaks up box office
|
No let-up for perpetual music maker Quincy Jones
|
Gil Scott-Heron, credited with inspiring rap, dies
|
Yemeni soldiers killed near al Qaeda-held city
|
NATO's Rasmussen says Gaddafi rule coming to end
|
Blast injures 10 in Pakistan's North Waziristan
|
Belgrade protest against Mladic arrest turns violent
|
Pakistan to launch offensive in North Waziristan: report
|
NATO strike kills civilians, Afghans say most were kids
|
Blast at barracks kills 12 in Nigeria
|
Icy battlefield focus of India and Pakistan talks
|
Japan voters want PM to go as no-confidence vote looms
|
China's LinkedIn, Ushi, eyes big growth over next two years
|
Australia warns on cyber attacks on resource firms
|
ARM to take seriously any Intel plan to make chips
|
Hollywood stars at center of Broadway backlash
|
David Hyde Pierce starring in psychological thriller
|
Pirates 4 still top pick at foreign box office
|
Top Cannes movies get box office boost
|
Mladic could be sent to war crimes court in days
|
Berlusconi faces defeat in crucial Milan election
|
Three killed as army enters central Syrian town
|
German government wants nuclear exit by 2022 at latest
|
Icy battlefield focus of India, Pakistan talks
|
Pakistan tells aid agencies to prepare for
|
No restart for south Japan reactors until safety assured
|
Suicide bombers launch twin attacks in west Afghanistan
|
As RIM struggles, talk of a change at top surfaces
|
My Morning Jacket get nostalgic on Circuital
|
Greece at new risk of being pushed off euro
Bodies of missing Tenn. mom, Jo Ann Bain, and daughter found
Female Breasts Are Bigger Than Ever
AMD Trinity Accelerated Processing Units Now in Volume Production
The Avengers (2012 film), made the second biggest opening- and single-day gross of all-time
AMD to Start Production of piledriver
Ivy Bridge Quad-Core, Four-Thread Desktop CPUs
Islamists Protest Lady Gaga's Concert in Indonesia
Japan Successfully Broadcasts an 8K Signal Over the Air
ECB boosts loans to 1 trillion Euro to stop credit crunch
Egypt : Mohammed Morsi won with 52 percent
What do you call 100,000 Frenchmen with their hands up
AMD Launches AMD Embedded R-Series APU Platform
Fed Should not Ignore Emerging Market Crisis
Fed casts shadow over India, emerging markets
Why are Chinese tourists so rude? A few insights